This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.mft File: hoJWrjTlRSbFslqsK51fX6h9Bh4.mft (raw, json) Hash identifier: nT0UiCasnhDV3hK+9anI6HdmQJmhuJnpjv0nEMWtbQ8= Subject key identifier: 55:CD:04:92:D6:F0:62:2F:0E:5A:4D:DB:EA:EB:55:61:01:20:FF:E0 Authority key identifier: 86:82:56:AE:34:E5:45:26:C5:B2:5A:AC:2B:9D:5F:5F:A8:7D:06:1E Certificate issuer: /CN=868256ae34e54526c5b25aac2b9d5f5fa87d061e Certificate serial: 019BB2F065C6697834B1007A2FA2674ACAE7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoJWrjTlRSbFslqsK51fX6h9Bh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.mft Manifest number: 0E7C Signing time: Mon 12 Jan 2026 16:00:57 +0000 Manifest this update: Mon 12 Jan 2026 16:00:57 +0000 Manifest next update: Tue 13 Jan 2026 16:00:57 +0000 Files and hashes: 1: YuHJmYFCnAz2SSKMxUmvTY991CE.roa (hash: TOD8ARSMl4ubAqj2aurWlfEhx3SyaroxCxGERNtBcZQ=) 2: hoJWrjTlRSbFslqsK51fX6h9Bh4.crl (hash: KneIboDiaNqxfIJL+ekhEWq1MmWWPVlrbdlmw/oaIEU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.crl rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.mft rsync://rpki.ripe.net/repository/DEFAULT/hoJWrjTlRSbFslqsK51fX6h9Bh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 16:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b2:f0:65:c6:69:78:34:b1:00:7a:2f:a2:67:4a:ca:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=868256ae34e54526c5b25aac2b9d5f5fa87d061e Validity Not Before: Jan 12 16:00:57 2026 GMT Not After : Jan 13 16:00:57 2026 GMT Subject: CN=55cd0492d6f0622f0e5a4ddbeaeb55610120ffe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d4:2e:3a:a5:b0:e1:9e:e4:70:2c:f4:c0:95: 6a:65:05:34:f2:ed:f6:04:60:a8:41:72:2f:46:5c: f7:70:90:b8:cb:d8:80:17:b5:14:e3:55:e9:eb:b0: ca:b0:27:66:4f:3f:52:5e:16:ec:24:b2:e9:be:bf: 32:77:f7:65:64:80:44:8f:60:47:d8:ff:ae:c7:cb: cb:51:a2:4b:15:5a:aa:83:20:86:f4:a7:c3:80:5a: 2b:4b:33:d6:b2:e0:3b:a9:bc:a8:a1:02:a0:61:a4: 77:08:20:97:6f:e6:75:53:95:71:ed:ec:62:5f:a5: b8:ab:6a:77:f6:7c:2a:e6:7b:18:c1:21:87:4e:89: 18:f4:05:77:00:98:0f:0c:0a:f8:08:d1:1c:a9:82: b9:26:bc:8a:fe:53:ff:02:85:21:c8:2a:7a:b1:fe: 8d:15:05:58:38:b5:a9:05:a6:f9:78:6d:3d:f7:8c: c6:76:d5:b2:20:18:02:0c:c7:0f:bb:ba:74:ff:c4: 69:81:f1:6a:c9:e1:ea:6a:58:f4:87:54:d6:05:89: 94:1f:f9:b2:4c:99:e2:a3:88:cd:56:6c:06:37:c7: 17:8e:c4:e7:1d:d3:ec:4b:1c:0d:b7:26:97:b0:5c: e7:99:45:00:b5:fb:a3:ce:e8:ca:44:7c:9f:0c:f9: aa:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:CD:04:92:D6:F0:62:2F:0E:5A:4D:DB:EA:EB:55:61:01:20:FF:E0 X509v3 Authority Key Identifier: keyid:86:82:56:AE:34:E5:45:26:C5:B2:5A:AC:2B:9D:5F:5F:A8:7D:06:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoJWrjTlRSbFslqsK51fX6h9Bh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:15:81:25:7e:81:ca:71:3e:ee:26:0a:da:dd:0b:62:57:e3: b8:67:bb:8b:ee:6f:ae:c8:be:84:59:1d:40:1b:f8:3d:c5:49: 67:ce:4d:c6:75:79:2e:39:8a:49:ca:c5:47:73:5c:f8:db:d9: b2:8c:71:2d:1a:22:cb:b7:6e:c3:b9:70:1e:12:39:60:bd:a2: 4a:4a:13:d7:cf:59:e5:7d:d8:30:1b:65:81:58:f6:17:3b:e0: cb:86:a8:67:c0:25:10:3e:8b:8c:15:e6:a4:21:e8:bd:d2:99: 07:9e:47:02:d7:c5:26:fd:5b:f5:dc:53:00:23:71:6f:ad:2e: 8b:d4:ef:05:29:a5:7a:c6:79:df:2d:02:25:5e:21:ec:1c:2b: 27:70:79:cf:cb:bc:ef:ff:00:75:04:68:9d:6f:25:84:db:23: 70:71:c3:63:e2:80:a3:e7:b4:2a:4b:4f:a6:53:ae:87:8d:1b: 0e:21:e4:e2:41:04:04:f9:81:48:1d:51:a8:f7:42:a1:09:0a: 08:92:04:fa:98:45:19:58:56:db:aa:cf:9d:53:3a:95:6a:34: 52:46:1e:7f:63:f7:97:37:bb:ab:a1:b2:88:df:e9:e5:80:ca: 71:50:98:68:12:94:b8:5c:87:7d:eb:0d:d7:d0:d5:78:c7:7a: 43:2c:6d:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuy8GXGaXg0sQB6L6JnSsrnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ODI1NmFlMzRlNTQ1MjZjNWIyNWFhYzJiOWQ1ZjVmYTg3 ZDA2MWUwHhcNMjYwMTEyMTYwMDU3WhcNMjYwMTEzMTYwMDU3WjAzMTEwLwYDVQQD Eyg1NWNkMDQ5MmQ2ZjA2MjJmMGU1YTRkZGJlYWViNTU2MTAxMjBmZmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNQuOqWw4Z7kcCz0wJVqZQU08u32 BGCoQXIvRlz3cJC4y9iAF7UU41Xp67DKsCdmTz9SXhbsJLLpvr8yd/dlZIBEj2BH 2P+ux8vLUaJLFVqqgyCG9KfDgForSzPWsuA7qbyooQKgYaR3CCCXb+Z1U5Vx7exi X6W4q2p39nwq5nsYwSGHTokY9AV3AJgPDAr4CNEcqYK5JryK/lP/AoUhyCp6sf6N FQVYOLWpBab5eG0994zGdtWyIBgCDMcPu7p0/8RpgfFqyeHqalj0h1TWBYmUH/my TJnio4jNVmwGN8cXjsTnHdPsSxwNtyaXsFznmUUAtfujzujKRHyfDPmqswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFXNBJLW8GIvDlpN2+rrVWEBIP/gMB8GA1UdIwQY MBaAFIaCVq405UUmxbJarCudX1+ofQYeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaG9KV3JqVGxSU2JGc2xxc0s1MWZYNmg5Qmg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS83YjI5NmEtZmQwMy00YWZhLWJjZDIt Y2JmNjA3MDBlYjkyLzEvaG9KV3JqVGxSU2JGc2xxc0s1MWZYNmg5Qmg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS83YjI5NmEtZmQwMy00YWZhLWJjZDItY2JmNjA3MDBlYjky LzEvaG9KV3JqVGxSU2JGc2xxc0s1MWZYNmg5Qmg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhRWBJX6B ynE+7iYK2t0LYlfjuGe7i+5vrsi+hFkdQBv4PcVJZ85NxnV5LjmKScrFR3Nc+NvZ soxxLRoiy7duw7lwHhI5YL2iSkoT189Z5X3YMBtlgVj2Fzvgy4aoZ8AlED6LjBXm pCHovdKZB55HAtfFJv1b9dxTACNxb60ui9TvBSmlesZ53y0CJV4h7BwrJ3B5z8u8 7/8AdQRonW8lhNsjcHHDY+KAo+e0KktPplOuh40bDiHk4kEEBPmBSB1RqPdCoQkK CJIE+phFGVhW26rPnVM6lWo0UkYef2P3lze7q6GyiN/p5YDKcVCYaBKUuFyHfesN 19DVeMd6Qyxt4A== -----END CERTIFICATE-----Generated at Mon Jan 12 22:27:01 2026 by rpki-client